The submitted reference was prepared by a foreign Patent Office, 
and is directed to a foreign counterpart application to the 
present US Patent Application. Consistent with Applicant's duty 
of disclosure under 37 CFR 1 .56, Applicant recognizes that 
the Examiner may consider it relevant when making a patentability 
determination. However, this submission should not be misconstrued 
as an admission by the Applicant that the reference is either 
relevant or not relevant to patentability, especially since the 
reference was prepared by a foreign Patent Office that is 
governed by a different body of law than the USPTO. 

Nevertheless, in the interest of full disclosure and good faith, Applicant 
submits the reference for consideration by the Examiner, and requests 
that the Examiner initial the attached Form PTO 1449, indicating the 
Examiner has considered this reference. 
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Notification of Reasons for Refusal 



Patent application number Japanese Patent Application No. 2002-273601 

Drafting date October 4, 2007 

Examiner Shigenori Aoki 4229 5S00 

Representative of the applicant Takahisa Sato 

Applicable articles Article 29 Paragraph 2, Article 36 

This application should be refused according to the following reasons. If any 
arguments on these reasons for refusal exist, please file an argument within 60 days 
from the sending date of this notification. 

Reason 

(1) For this application, the description of the claims does not satisfy the requirements 
prescribed in Patent Law Article 36 Paragraph 6 Item 2 in the following point. 

(2) Because the invention relating to the following claims in this application is an 
invention which could easily have been made, prior to the filing of the patent 
application, by a person with common knowledge in the art to which the invention 
pertains, on the basis of an invention described in the following publications distributed 
in Japan or foreign countries prior to the filling of the patent application, or on the basis 
of an invention which could be utilized by the publics through the telecommunication 
lines, the right to the patent shall not be granted in accordance with the provision of the 
article 29, paragraph 2 of the Patent Law. 

Note (Please refer to the list of references for cited references) 

About Reason (1) 

(a) With regard to the description that "authentication means having key data ... 
supplies the first data for authentication that the means to be authenticated uses for 
the authentication to the means to be authenticated" in a matter described in claim 1, 
13, 15 of this application can be read as not only a supplying origin and a supplying 



target is the same "means to be authenticated" but also a supplying origin is the 
"authentication means" and a supplying target is the "means to be authenticated". 
Accordingly, because the subject matter in the process for "supplying" cannot be 
decided as single meaning so that it is unclear, the inventions concerning claim 1,3, 
15 do not satisfy the requirement prescribed in Patent Law Article 36 Paragraph 6 
Item 2. 

Also, with regard to the inventions concerning 2 - 12, 14, those are depending from 
claim 1,13, those do not satisfy the requirement prescribed in Patent Law Article 36 
Paragraph 6 Item 2 either by the similar reason. 
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(b) With regard to the description that "... the first data for authentication which makes 
the recovery of the key data difficult is generated based on the predetermined 
generation technique..." in a matter described in claim 1, 13, 15 of this application, 
it cannot be decided as single meaning whether "key data" is generated or "the first 
data for authentication" is generated. Accordingly, the inventions concerning claim 
1,3, 15 of this application do not satisfy the requirement prescribed in Patent Law 
Article 36 Paragraph 6 Item 2. 

Also, with regard to the inventions concerning 2 - 12, 14, those are depending from 
claim 1,13, those do not satisfy the requirement prescribed in Patent Law Article 36 
Paragraph 6 Item 2 either by the similar reason. 

(c) With regard to "the first data for authentication" in a matter described in claim 1,13, 
15 of this application, the expression that "the first data for authentication which 
makes the recovery of the key data difficult" is disclosed for the first process, the 
first procedure, or the first means, and it can be thought that it differs from the "the 
first data for authentication" described previously in the point that it is difficult to 
recover the key data". On the other hand, because it was referred to, it can be 
thought that "the first data for authentication" and "the first data for authentication 
that makes the recovery of the key data difficult" have the same characteristics. 
Accordingly, the characteristics of each of the first data for authentication cannot be 
decided as single meaning so that the inventions concerning claim 1,3, 15 of this 
application do not satisfy the requirement prescribed in Patent Law Article 36 
Paragraph 6 Item 2. 

Also, with regard to the inventions concerning 2 - 12, 14, those are depending from 
claim 1,13, those do not satisfy the requirement prescribed in Patent Law Article 36 
Paragraph 6 Item 2 either by the similar reason. 

(d) Although it is described in claim 4 of this application that "data for authentication 
generated by using the first key data relating to the processing that the first user 
allowed to the means to be authenticated in the first process. .. ", "what kind of 
processing done by the means to be authenticated "the processing" designates 
cannot be decided in single meaning so that it is unclear. Accordingly, the 
inventions concerning claim 4 of this application does not satisfy the requirement 
prescribed in Patent Law Article 36 Paragraph 6 Item 2. 

Also, with regard to the inventions concerning claim 5, which is depending from claim 
4 it does not satisfy the requirement prescribed in Patent Law Article 36 Paragraph 6 
Item 2 either by the similar reason. 



About Reason (2) 



Claim: 1,9-11 
Cited references: 1 
Remarks 

A data processing method is described in cited reference 1 in which an IC card having 
encryption keys corresponding to plural areas generates a degeneration key based on a 
degeneration key generation processing according to the degeneration processing order 
designated by using a encryption key based on the provider number and the number of 
providers in an area to be accessed, the area is designated by a controller having the 
degeneration key generated by the degeneration processing by using an encryption key 
for the area to be accessed, the mutual authentication with the controller is performed by 
using the degeneration key of the IC card, and in the condition the it is verified that the 
degeneration key of the controller and degeneration key of the IC card are the same 
degeneration key, Read-Out and Write for the area relating to the encryption key are 
performed. 
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Also, "this degeneration key is used only for authentication so that it is not necessary 
to be able to decrypt the original plural encryption keys from the degeneration key" is 
described in paragraph [0071] of cited reference 1. Accordingly, it is disclosed that it is 
difficult to decrypt the encryption key in the degeneration processing performed in the 
IC card or the controller so that it can be done easily by a person skilled in the art to 
make the invention concerning claim 1 of this application functionally based on the 
invention described in cited reference 1 . 

Claim: 2 

References cited: 1 
Remarks 

With regard to the data processing method described in cited reference 1 , it shows to 
memorize the degeneration key generated in a memory of the controller and 
degeneration order especially in paragraph [0080] - [0082]. Also, it is well known to a 
person skilled in the art to integrate a circuit for processing, such as for the degeneration 
processing with a memory. 

Claim: 3 

References cited: 1 
Remarks 

With regard to the data processing method described in cited reference 1 , the 
degeneration keys are generated by using the encryption keys relating to the processing 
for read-out, write from and to the area provided in the IC card and allowed by the 
controller. 

Claim: 4, 6, 7 
References cited: 1 
Remarks 

With regard to the degeneration processing of the data processing method described in 
cited reference 1, especially as shown in Fig. 3, the degeneration key is generated by a 
series of multiplex encryption with each encryption key corresponding to each area, 
respectively. 



Claim: 5 



References cited: 1, 2 
Remarks 

Because it is described in cited reference 2 to prevent a compression data from 
manipulation by giving the decoding using RSA method, it is a well-known art before 
this application. 
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And, with regard to the degeneration processing of the data processing method 
described in cited reference 1, especially as shown in Fig. 3, the degeneration key is 
generated by a series of multiplex encryption with each encryption key corresponding to 
each area, respectively. However, it can be done easily by a person skilled in the art to 
add a manipulation prevention function by employing the well-known art to the 
degeneration key and giving the decoding using RSA method. 

Claim: 8 

References cited: 1 
Remarks 

With regard to the data processing method described in cited reference, especially 
paragraph [0097], [0080], and Fig. 9- 1 1, it shows that the degeneration key of a 
controller is generated by using one encryption key relating to plural providers. 

Claim: 12 

References cited: 1, 3 
Remarks 

It is described in cited reference 3 (especially column 5 line 21 — 30) to provide a device 
in which authentication processing is executed with a display in order to check the 
operation or display a command and data so that it is a well-known art before the 
application. 

Claim: 13, 14 
References cited: 1 
Remarks 

The data processing method shown in the remarks of the claim: 1 is described in cited 
reference 1 . It is usual practice for a person skilled in the art to be programmed to carry 
out the method with a data processing device. 

Claim: 15 
References cited: 1 
Remarks 

The data processing method shown in the remarks of the claim: 1 is described in cited 
reference 1 . It is usual practice for a person skilled in the art to comprise a data 
processing device to carry out the method. 

If any reason for refusal is found later, it will be notified. 

List of cited references 

1 . Published patent application No. HEI 1 0-327 1 42 

2. Published patent application No. SHO 60-26387 
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3. Published patent application No. HEI 9-1 1 4946 



Record of the result of the prior art reference searched 
Searched Field IPC H04L9/00 

Prior art document Published patent application No. HEI 1 1-163853 

The record of the result of prior art reference searched is not the reason for refusal. 

Director/Deputy 

Primary examiner/Deputy Shoji Ishikawa 8524 

Examiner Shigenori Aoki 4229 

Assistant Examiner 
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